Error Message: DNS Does Not Appear To Be Working

2,106 views

Skip to first unread message

matt.c...@gmail.com

unread,

Nov 23, 2017, 10:37:48 PM11/23/17

to tunnelblick-discuss

I use Tunnelblick 3.7.5beta02 (build 4930) on my OSX Sierra (10.12.6) MacBook and no matter which server I connect to I get the same error about 40 seconds after connecting:

Warning: After connecting to Netherlands, DNS does not appear to be working. This may mean that your VPN is not configured correctly

This error has come up every day for a few weeks.

I looked at turning the OSX firewall off, no change.

I looked at trying to make an exception with my antivirus (Avira), and even uninstalling the antivirus to test if this was causing an error (suggested by my VPN provider), no change.

I sent emails to my VPN provider (Private Internet Access) but after going through various stages of escalation with them and varying levels of Tech Agents they referred me to this forum and basically washed their hands of me as I don't want to use their own app over Tunnelblick.

Any thoughts?

Would a report log be useful to anyone?

Thanks,

Matt.

Tunnelblick developer

unread,

Nov 23, 2017, 10:40:44 PM11/23/17

to tunnelblick-discuss

Please see my comments about increasing the delay before the IP address check in this discussion.

MattC

unread,

Nov 24, 2017, 6:47:26 AM11/24/17

to tunnelblick-discuss

Hi,

So my IP before connecting was 94.175.143.19,30413,205.233.73.116, after connecting I get 212.92.108.84,33573,205.233.73.116

I am stumbling through steps as to be honest I know only a little about all this. Sorry if I make mistakes or need a little hand holding through this...

I followed your post and stepped through some steps:

I did a DNS Leak test

It seems the error does not happy on EVERY connection attempt, just 3/4 or 4/5 attempts.

Below is the log from Tunnelblick on such an erroneous connection attempt:

*Tunnelblick: OS X 10.12.6; Tunnelblick 3.7.5beta02 (build 4930); prior version 3.7.5beta01 (build 4910); Admin user

git commit 75f291af9e98a34e5e9ef3e2a667cd5590c08dd1

Configuration Netherlands

"Sanitized" condensed configuration file for /Users/mattchoules/Library/Application Support/Tunnelblick/Configurations/Netherlands.tblk:

client

dev tun

proto udp

remote nl.privateinternetaccess.com 1194

resolv-retry infinite

nobind

persist-key

persist-tun

ca ca.crt

tls-client

remote-cert-tls server

auth-user-pass

comp-lzo

verb 1

reneg-sec 0

crl-verify crl.pem

================================================================================

Non-Apple kexts that are loaded:

Index Refs Address Size Wired Name (Version) UUID <Linked Against>

146 0 0xffffff7f82b97000 0x2000 0x2000 com.nvidia.CUDA (1.1.0) DD792765-CA28-395A-8593-D6837F05C4FF <4 1>

148 0 0xffffff7f80c3d000 0x7000 0x7000 com.avira.kext.FileAccessControl (1.2.5) FB07160A-508D-3739-8548-4E1197D1DF37 <5 4 3 1>

================================================================================

There are no unusual files in Netherlands.tblk

================================================================================

Configuration preferences:

autoConnect = 1

-onSystemStart = 0

-keychainHasUsernameAndPassword = 1

-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0

-lastConnectionSucceeded = 1

================================================================================

Wildcard preferences:

================================================================================

Program preferences:

launchAtNextLogin = 1

notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0

tunnelblickVersionHistory = (

"3.7.5beta02 (build 4930)",

"3.7.5beta01 (build 4910)",

"3.7.4beta01 (build 4890)",

"3.7.3beta03 (build 4870)",

"3.7.2a (build 4851)",

"3.7.2 (build 4850)",

"3.7.1b (build 4813)",

"3.7.1a (build 4812)",

"3.7.1 (build 4811)",

"3.7.0 (build 4790)"

)

statusDisplayNumber = 0

lastLaunchTime = 533174388.870814

doNotShowNotificationWindowOnMouseover = 0

doNotShowConnectionSubmenus = 0

showConnectedDurations = 1

lastLanguageAtLaunchWasRTL = 0

connectionWindowDisplayCriteria = showWhenChanges

maxLogDisplaySize = 102400

lastConnectedDisplayName = Netherlands

keyboardShortcutIndex = 1

updateCheckAutomatically = 1

updateCheckBetas = 1

NSWindow Frame SettingsSheetWindow = 80 88 829 524 0 0 1920 1178

NSWindow Frame ConnectingWindow = 765 744 389 187 0 0 1920 1178

NSWindow Frame SUStatusFrame = 760 787 400 129 0 0 1920 1178

NSWindow Frame SUUpdateAlert = 650 590 620 392 0 0 1920 1178

detailsWindowFrameVersion = 4930

detailsWindowFrame = {{912, 91}, {920, 468}}

detailsWindowLeftFrame = {{0, 0}, {165, 350}}

detailsWindowViewIndex = 0

detailsWindowConfigurationsTabIdentifier = log

leftNavSelectedDisplayName = Netherlands

AdvancedWindowTabIdentifier = connectingAndDisconnecting

haveDealtWithOldTunTapPreferences = 1

haveDealtWithOldLoginItem = 1

SUEnableAutomaticChecks = 1

SUScheduledCheckInterval = 86400

SUSendProfileInfo = 0

SULastCheckTime = 2017-11-23 23:59:49 +0000

SULastProfileSubmissionDate = 2017-03-05 17:02:56 +0000

SUHasLaunchedBefore = 1

WebKitDefaultFontSize = 16

WebKitStandardFont = Times

askedUserIfOKToCheckThatIPAddressDidNotChangeAfterConnection = 1

haveDealtWithSparkle1dot5b6 = 1

updateSendProfileInfo = 0

================================================================================

Tunnelblick Log:

2017-11-24 11:39:14 *Tunnelblick: openvpnstart starting OpenVPN

*Tunnelblick: OS X 10.12.6; Tunnelblick 3.7.5beta02 (build 4930); prior version 3.7.5beta01 (build 4910)

2017-11-24 11:39:14 *Tunnelblick: Attempting connection with Netherlands using shadow copy; Set nameserver = 769; monitoring connection

2017-11-24 11:39:14 *Tunnelblick: openvpnstart start Netherlands.tblk 1338 769 0 1 0 1065264 -ptADGNWradsgnw 2.3.18-openssl-1.0.2m

2017-11-24 11:39:15 *Tunnelblick: openvpnstart log:

OpenVPN started successfully. Command used to start OpenVPN (one argument per displayed line):

/Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.18-openssl-1.0.2m/openvpn

--daemon

--log

/Library/Application Support/Tunnelblick/Logs/-SUsers-Smattchoules-SLibrary-SApplication Support-STunnelblick-SConfigurations-SNetherlands.tblk-SContents-SResources-Sconfig.ovpn.769_0_1_0_1065264.1338.openvpn.log

--cd

/Library/Application Support/Tunnelblick/Users/mattchoules/Netherlands.tblk/Contents/Resources

--setenv

IV_GUI_VER

"net.tunnelblick.tunnelblick 4930 3.7.5beta02 (build 4930)"

--verb

--config

/Library/Application Support/Tunnelblick/Users/mattchoules/Netherlands.tblk/Contents/Resources/config.ovpn

--verb

--cd

/Library/Application Support/Tunnelblick/Users/mattchoules/Netherlands.tblk/Contents/Resources

--management

127.0.0.1

1338

--management-query-passwords

--management-hold

--script-security

--up

/Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw

--down

/Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw

2017-11-24 11:39:14 OpenVPN 2.3.18 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [PKCS11] [MH] [IPv6] built on Nov 10 2017

2017-11-24 11:39:14 library versions: OpenSSL 1.0.2m 2 Nov 2017, LZO 2.10

2017-11-24 11:39:14 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:1338

2017-11-24 11:39:14 Need hold release from management interface, waiting...

2017-11-24 11:39:15 *Tunnelblick: Established communication with OpenVPN

2017-11-24 11:39:15 *Tunnelblick: Obtained VPN username and password from the Keychain

2017-11-24 11:39:15 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:1338

2017-11-24 11:39:15 MANAGEMENT: CMD 'pid'

2017-11-24 11:39:15 MANAGEMENT: CMD 'state on'

2017-11-24 11:39:15 MANAGEMENT: CMD 'state'

2017-11-24 11:39:15 MANAGEMENT: CMD 'bytecount 1'

2017-11-24 11:39:15 MANAGEMENT: CMD 'hold release'

2017-11-24 11:39:15 MANAGEMENT: CMD 'username "Auth" "p6251787"'

2017-11-24 11:39:15 MANAGEMENT: CMD 'password [...]'

2017-11-24 11:39:15 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

2017-11-24 11:39:15 Socket Buffers: R=[196724->196724] S=[9216->9216]

2017-11-24 11:39:15 MANAGEMENT: >STATE:1511523555,RESOLVE,,,

2017-11-24 11:39:15 UDPv4 link local: [undef]

2017-11-24 11:39:15 UDPv4 link remote: [AF_INET]46.166.188.219:1194

2017-11-24 11:39:15 MANAGEMENT: >STATE:1511523555,WAIT,,,

2017-11-24 11:39:15 MANAGEMENT: >STATE:1511523555,AUTH,,,

2017-11-24 11:39:15 TLS: Initial packet from [AF_INET]46.166.188.219:1194, sid=05450a60 4eb4054a

2017-11-24 11:39:15 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this

2017-11-24 11:39:15 CRL CHECK OK: C=US, ST=OH, L=Columbus, O=Private Internet Access, CN=Private Internet Access CA, emailAddress=sec...@privateinternetaccess.com

2017-11-24 11:39:15 VERIFY OK: depth=1, C=US, ST=OH, L=Columbus, O=Private Internet Access, CN=Private Internet Access CA, emailAddress=sec...@privateinternetaccess.com

2017-11-24 11:39:15 Validating certificate key usage

2017-11-24 11:39:15 ++ Certificate has key usage 00a0, expects 00a0

2017-11-24 11:39:15 VERIFY KU OK

2017-11-24 11:39:15 Validating certificate extended key usage

2017-11-24 11:39:15 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication

2017-11-24 11:39:15 VERIFY EKU OK

2017-11-24 11:39:15 CRL CHECK OK: C=US, ST=CA, L=LosAngeles, O=Private Internet Access, OU=Private Internet Access, CN=805dd5c0c990644345579329981780f3, name=805dd5c0c990644345579329981780f3

2017-11-24 11:39:15 VERIFY OK: depth=0, C=US, ST=CA, L=LosAngeles, O=Private Internet Access, OU=Private Internet Access, CN=805dd5c0c990644345579329981780f3, name=805dd5c0c990644345579329981780f3

2017-11-24 11:39:15 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key

2017-11-24 11:39:15 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).

2017-11-24 11:39:15 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication

2017-11-24 11:39:15 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key

2017-11-24 11:39:15 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).

2017-11-24 11:39:15 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication

2017-11-24 11:39:15 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA

2017-11-24 11:39:15 [805dd5c0c990644345579329981780f3] Peer Connection Initiated with [AF_INET]46.166.188.219:1194

2017-11-24 11:39:16 MANAGEMENT: >STATE:1511523556,GET_CONFIG,,,

2017-11-24 11:39:17 SENT CONTROL [805dd5c0c990644345579329981780f3]: 'PUSH_REQUEST' (status=1)

2017-11-24 11:39:17 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 209.222.18.222,dhcp-option DNS 209.222.18.218,ping 10,comp-lzo no,route 10.18.10.1,topology net30,ifconfig 10.18.10.6 10.18.10.5,auth-token PiNr22z8897TR7vRr4h2o+sa1EBKdlvEOVjFGSv11ds='

2017-11-24 11:39:17 OPTIONS IMPORT: timers and/or timeouts modified

2017-11-24 11:39:17 OPTIONS IMPORT: LZO parms modified

2017-11-24 11:39:17 OPTIONS IMPORT: --ifconfig/up options modified

2017-11-24 11:39:17 OPTIONS IMPORT: route options modified

2017-11-24 11:39:17 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified

2017-11-24 11:39:17 Opening utun (connect(AF_SYS_CONTROL)): Resource busy

2017-11-24 11:39:17 Opened utun device utun1

2017-11-24 11:39:17 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0

2017-11-24 11:39:17 MANAGEMENT: >STATE:1511523557,ASSIGN_IP,,10.18.10.6,

2017-11-24 11:39:17 /sbin/ifconfig utun1 delete

ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address

2017-11-24 11:39:17 NOTE: Tried to delete pre-existing tun/tap instance -- No Problem if failure

2017-11-24 11:39:17 /sbin/ifconfig utun1 10.18.10.6 10.18.10.5 mtu 1500 netmask 255.255.255.255 up

2017-11-24 11:39:17 /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw utun1 1500 1542 10.18.10.6 10.18.10.5 init

**********************************************

Start of output from client.up.tunnelblick.sh

Retrieved from OpenVPN: name server(s) [ 209.222.18.222 209.222.18.218 ], search domain(s) [ ] and SMB server(s) [ ] and using default domain name [ openvpn ]

WARNING: Ignoring ServerAddresses '209.222.18.222 209.222.18.218' because ServerAddresses was set manually and '-allowChangesToManuallySetNetworkSettings' was not specified

Setting search domains to 'openvpn' because running under OS X 10.6 or higher and the search domains were not set manually (or are allowed to be changed) and 'Prepend domain name to search domains' was not selected

Saved the DNS and SMB configurations so they can be restored

Did not change DNS ServerAddresses setting of '208.67.222.222 208.67.220.220' (but re-set it)

Changed DNS SearchDomains setting from '' to 'openvpn'

Changed DNS DomainName setting from '' to 'openvpn'

Did not change SMB NetBIOSName setting of ''

Did not change SMB Workgroup setting of ''

Did not change SMB WINSAddresses setting of ''

DNS servers '208.67.222.222 208.67.220.220' were set manually

DNS servers '208.67.222.222 208.67.220.220' will be used for DNS queries when the VPN is active

The DNS servers include only free public DNS servers known to Tunnelblick.

Flushed the DNS cache via dscacheutil

/usr/sbin/discoveryutil not present. Not flushing the DNS cache via discoveryutil

Notified mDNSResponder that the DNS cache was flushed

Setting up to monitor system configuration with process-network-changes

End of output from client.up.tunnelblick.sh

**********************************************

2017-11-24 11:39:21 *Tunnelblick: No 'connected.sh' script to execute

2017-11-24 11:39:21 /sbin/route add -net 46.166.188.219 192.168.0.1 255.255.255.255

add net 46.166.188.219: gateway 192.168.0.1

2017-11-24 11:39:21 /sbin/route add -net 0.0.0.0 10.18.10.5 128.0.0.0

add net 0.0.0.0: gateway 10.18.10.5

2017-11-24 11:39:21 /sbin/route add -net 128.0.0.0 10.18.10.5 128.0.0.0

add net 128.0.0.0: gateway 10.18.10.5

2017-11-24 11:39:21 MANAGEMENT: >STATE:1511523561,ADD_ROUTES,,,

2017-11-24 11:39:21 /sbin/route add -net 10.18.10.1 10.18.10.5 255.255.255.255

add net 10.18.10.1: gateway 10.18.10.5

2017-11-24 11:39:21 Initialization Sequence Completed

2017-11-24 11:39:21 MANAGEMENT: >STATE:1511523561,CONNECTED,SUCCESS,10.18.10.6,46.166.188.219

2017-11-24 11:39:25 *Tunnelblick process-network-changes: A system configuration change was ignored

2017-11-24 11:40:01 *Tunnelblick: After 30.0 seconds, gave up trying to fetch IP address information using the ipInfo host's name after connecting.

2017-11-24 11:40:01 *Tunnelblick: fetched IP address information using the ipInfo host's IP address after connecting.

================================================================================

"Sanitized" full configuration file

client

dev tun

proto udp

remote nl.privateinternetaccess.com 1194

resolv-retry infinite

nobind

persist-key

persist-tun

ca ca.crt

tls-client

remote-cert-tls server

auth-user-pass

comp-lzo

verb 1

reneg-sec 0

crl-verify crl.pem

================================================================================

ifconfig output:

lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384

options=1203<RXCSUM,TXCSUM,TXSTATUS,SW_TIMESTAMP>

inet 127.0.0.1 netmask 0xff000000

inet6 ::1 prefixlen 128

inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1

nd6 options=201<PERFORMNUD,DAD>

gif0: flags=8010<POINTOPOINT,MULTICAST> mtu 1280

stf0: flags=0<> mtu 1280

en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500

ether 60:03:08:8d:c9:9a

inet 192.168.0.15 netmask 0xffffff00 broadcast 192.168.0.255

media: autoselect

status: active

en1: flags=963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX> mtu 1500

options=60<TSO4,TSO6>

ether 72:00:00:c1:19:10

media: autoselect <full-duplex>

status: inactive

en2: flags=963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX> mtu 1500

options=60<TSO4,TSO6>

ether 72:00:00:c1:19:11

media: autoselect <full-duplex>

status: inactive

p2p0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 2304

ether 02:03:08:8d:c9:9a

media: autoselect

status: inactive

awdl0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1484

ether f6:9f:36:e8:f4:88

inet6 fe80::f49f:36ff:fee8:f488%awdl0 prefixlen 64 scopeid 0x8

nd6 options=201<PERFORMNUD,DAD>

media: autoselect

status: active

bridge0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500

options=63<RXCSUM,TXCSUM,TSO4,TSO6>

ether 72:00:00:c1:19:10

Configuration:

id 0:0:0:0:0:0 priority 0 hellotime 0 fwddelay 0

maxage 0 holdcnt 0 proto stp maxaddr 100 timeout 1200

root id 0:0:0:0:0:0 priority 0 ifcost 0 port 0

ipfilter disabled flags 0x2

member: en1 flags=3<LEARNING,DISCOVER>

ifmaxaddr 0 port 5 priority 0 path cost 0

member: en2 flags=3<LEARNING,DISCOVER>

ifmaxaddr 0 port 6 priority 0 path cost 0

media: <unknown type>

status: inactive

utun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 2000

inet6 fe80::829a:c832:8345:a19b%utun0 prefixlen 64 scopeid 0xa

nd6 options=201<PERFORMNUD,DAD>

utun1: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1500

inet 10.18.10.6 --> 10.18.10.5 netmask 0xffffffff

================================================================================

Console Log:

2017-11-24 11:31:53 Tunnelblick[608] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Netherlands' account = 'username'

2017-11-24 11:31:53 Tunnelblick[608] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Netherlands' account = 'password'

2017-11-24 11:32:40 Tunnelblick[608] currentIPInfo(Name): IP address info could not be fetched within 35.3 seconds; the error was 'Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={NSUnderlyingError=0x6180004472c0 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "The request timed out." UserInfo={NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.}'; the response was '(null)'

2017-11-24 11:37:42 Tunnelblick[608] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Netherlands' account = 'username'

2017-11-24 11:37:42 Tunnelblick[608] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Netherlands' account = 'password'

2017-11-24 11:39:15 Tunnelblick[608] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Netherlands' account = 'username'

2017-11-24 11:39:15 Tunnelblick[608] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Netherlands' account = 'password'

2017-11-24 11:40:01 Tunnelblick[608] currentIPInfo(Name): IP address info could not be fetched within 35.1 seconds; the error was 'Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={NSUnderlyingError=0x60000044fd20 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "The request timed out." UserInfo={NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.}'; the response was '(null)'

Tunnelblick developer

unread,

Nov 24, 2017, 7:50:10 AM11/24/17

to tunnelblick-discuss

You didn't change the delay before Tunnelblick checks the IP address, as I described here.

If you're not familiar with using Terminal:

Copy the entire command that I described by selecting the entire line and then typing Command-c. Here is that command:
defaults write net.tunnelblick.tunnelblick delayBeforeIPAddressCheckAfterConnection -float 10.0
Open a Finder window.
Click on "Applications" in the sidebar.
Double-click on "Utilities".
Double-click on "Terminal".
Click "Edit" in Terminal's menu bar, then click "Paste".
Press the enter/return key.
Close the Terminal window.

Then try connecting and see if that makes a difference.

On Friday, November 24, 2017 at 6:47:26 AM UTC-5, MattC wrote:

Hi,

So my IP before connecting was 94.175.143.19,30413,205.233.73.116, after connecting I get 212.92.108.84,33573,205.233.73.116

I am stumbling through steps as to be honest I know only a little about all this. Sorry if I make mistakes or need a little hand holding through this...
I followed your post and stepped through some steps:

I did a DNS Leak test

It seems the error does not happy on EVERY connection attempt, just 3/4 or 4/5 attempts.

Below is the log from Tunnelblick on such an erroneous connection attempt:

*Tunnelblick: OS X 10.12.6; Tunnelblick 3.7.5beta02 (build 4930); prior version 3.7.5beta01 (build 4910); Admin user
git commit 75f291af9e98a34e5e9ef3e2a667cd5590c08dd1

<snip>

MattC

unread,

Nov 25, 2017, 5:01:11 PM11/25/17

to tunnelblick-discuss

Hi There,

I followed your instructions and input that command in via terminal as instructed and still get the same error. Not every time, but mostly every time.

Thanks for your help

Matt.

Tunnelblick developer

unread,

Nov 25, 2017, 5:07:51 PM11/25/17

to tunnelblick-discuss

Hmmm. What happens if (immediately after connecting to the VPN) you go to https://tunnelblick.net/ipinfo in a browser?

MattC

unread,

Nov 26, 2017, 11:20:49 AM11/26/17

to tunnelblick-discuss

When I connect successfully I get the apparent IP showing up in the drop down menu on Tunnelblick (see success.jpg image attached), but when I get the error the drop down shows a null IP (see fail.jpg image attached)

Fail

Before connecting:

94.175.143.19,36361,205.233.73.116

Immediately After connecting:

212.92.105.127,17697,205.233.73.116

Success

Before connecting:

94.175.143.19,36361,205.233.73.116

Immediately After connecting:

212.92.124.61,11649,205.233.73.116

success.jpg

MattC

unread,

Nov 26, 2017, 12:31:55 PM11/26/17

to tunnelblick-discuss

This time with the fail.jpg too....

fail.jpg

Tunnelblick developer

unread,

Nov 26, 2017, 3:37:51 PM11/26/17

to tunnelblick-discuss

Please copy/paste the following into Terminal, followed by enter/return:

defaults write net.tunnelblick.tunnelblick DB-IC -bool yes

Then post the new "Copy Diagnostic Info to Clipboard" info after getting a failure.

This will cause Tunnelblick to do extra logging of the IP address checking.

To stop the extra logging, copy/paste the following into Terminal, followed by enter/return:

defaults delete net.tunnelblick.tunnelblick DB-IC

MattC

unread,

Nov 26, 2017, 6:08:46 PM11/26/17

to tunnelblick-discuss

Ok, I did as instructed. Took me a few tries to get a failure weirdly, but did get it.

Below is the log:

*Tunnelblick: OS X 10.12.6; Tunnelblick 3.7.5beta02 (build 4930); prior version 3.7.5beta01 (build 4910); Admin user

git commit 75f291af9e98a34e5e9ef3e2a667cd5590c08dd1

Configuration Netherlands

"Sanitized" condensed configuration file for /Users/mattchoules/Library/Application Support/Tunnelblick/Configurations/Netherlands.tblk:

client

dev tun

proto udp

remote nl.privateinternetaccess.com 1194

resolv-retry infinite

nobind

persist-key

persist-tun

ca ca.crt

tls-client

remote-cert-tls server

auth-user-pass

comp-lzo

verb 1

reneg-sec 0

crl-verify crl.pem

================================================================================

Non-Apple kexts that are loaded:

Index Refs Address Size Wired Name (Version) UUID <Linked Against>

143 0 0xffffff7f82b97000 0x2000 0x2000 com.nvidia.CUDA (1.1.0) DD792765-CA28-395A-8593-D6837F05C4FF <4 1>

148 0 0xffffff7f80c3d000 0x7000 0x7000 com.avira.kext.FileAccessControl (1.2.5) FB07160A-508D-3739-8548-4E1197D1DF37 <5 4 3 1>

================================================================================

There are no unusual files in Netherlands.tblk

================================================================================

Configuration preferences:

autoConnect = 1

-onSystemStart = 0

-keychainHasUsernameAndPassword = 1

-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0

-lastConnectionSucceeded = 1

================================================================================

Wildcard preferences:

================================================================================

Program preferences:

DB-IC = 1

delayBeforeIPAddressCheckAfterConnection = 10

launchAtNextLogin = 1

notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0

tunnelblickVersionHistory = (

"3.7.5beta02 (build 4930)",

"3.7.5beta01 (build 4910)",

"3.7.4beta01 (build 4890)",

"3.7.3beta03 (build 4870)",

"3.7.2a (build 4851)",

"3.7.2 (build 4850)",

"3.7.1b (build 4813)",

"3.7.1a (build 4812)",

"3.7.1 (build 4811)",

"3.7.0 (build 4790)"

)

statusDisplayNumber = 0

lastLaunchTime = 533430361.68672

doNotShowNotificationWindowOnMouseover = 0

doNotShowConnectionSubmenus = 0

showConnectedDurations = 1

lastLanguageAtLaunchWasRTL = 0

connectionWindowDisplayCriteria = showWhenChanges

maxLogDisplaySize = 102400

lastConnectedDisplayName = Netherlands

keyboardShortcutIndex = 1

updateCheckAutomatically = 1

updateCheckBetas = 1

NSWindow Frame SettingsSheetWindow = 80 88 829 524 0 0 1920 1178

NSWindow Frame ConnectingWindow = 765 744 389 187 0 0 1920 1178

NSWindow Frame SUStatusFrame = 760 787 400 129 0 0 1920 1178

NSWindow Frame SUUpdateAlert = 650 590 620 392 0 0 1920 1178

detailsWindowFrameVersion = 4930

detailsWindowFrame = {{44, 683}, {920, 468}}

detailsWindowLeftFrame = {{0, 0}, {165, 350}}

detailsWindowViewIndex = 0

detailsWindowConfigurationsTabIdentifier = log

leftNavSelectedDisplayName = Netherlands

AdvancedWindowTabIdentifier = connectingAndDisconnecting

haveDealtWithOldTunTapPreferences = 1

haveDealtWithOldLoginItem = 1

SUEnableAutomaticChecks = 1

SUScheduledCheckInterval = 86400

SUSendProfileInfo = 0

SULastCheckTime = 2017-11-26 23:06:02 +0000

SULastProfileSubmissionDate = 2017-03-05 17:02:56 +0000

SUHasLaunchedBefore = 1

WebKitDefaultFontSize = 16

WebKitStandardFont = Times

askedUserIfOKToCheckThatIPAddressDidNotChangeAfterConnection = 1

haveDealtWithSparkle1dot5b6 = 1

updateSendProfileInfo = 0

================================================================================

Tunnelblick Log:

*Tunnelblick: OS X 10.12.6; Tunnelblick 3.7.5beta02 (build 4930); prior version 3.7.5beta01 (build 4910)

2017-11-26 23:06:00 *Tunnelblick: Attempting connection with Netherlands using shadow copy; Set nameserver = 769; monitoring connection

2017-11-26 23:06:00 *Tunnelblick: openvpnstart start Netherlands.tblk 1337 769 0 1 0 1065264 -ptADGNWradsgnw 2.3.18-openssl-1.0.2m

2017-11-26 23:06:00 OpenVPN 2.3.18 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [PKCS11] [MH] [IPv6] built on Nov 10 2017

2017-11-26 23:06:00 library versions: OpenSSL 1.0.2m 2 Nov 2017, LZO 2.10

2017-11-26 23:06:00 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:1337

2017-11-26 23:06:00 Need hold release from management interface, waiting...

2017-11-26 23:06:00 *Tunnelblick: openvpnstart starting OpenVPN

2017-11-26 23:06:01 *Tunnelblick: openvpnstart log:

OpenVPN started successfully. Command used to start OpenVPN (one argument per displayed line):

/Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.18-openssl-1.0.2m/openvpn

--daemon

--log

--cd

/Library/Application Support/Tunnelblick/Users/mattchoules/Netherlands.tblk/Contents/Resources

--setenv

IV_GUI_VER

"net.tunnelblick.tunnelblick 4930 3.7.5beta02 (build 4930)"

--verb

--config

/Library/Application Support/Tunnelblick/Users/mattchoules/Netherlands.tblk/Contents/Resources/config.ovpn

--verb

--cd

/Library/Application Support/Tunnelblick/Users/mattchoules/Netherlands.tblk/Contents/Resources

--management

127.0.0.1

1337

--management-query-passwords

--management-hold

--script-security

--up

/Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw

--down

/Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw

2017-11-26 23:06:01 *Tunnelblick: Established communication with OpenVPN

2017-11-26 23:06:01 *Tunnelblick: Obtained VPN username and password from the Keychain

2017-11-26 23:06:01 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:1337

2017-11-26 23:06:01 MANAGEMENT: CMD 'pid'

2017-11-26 23:06:01 MANAGEMENT: CMD 'state on'

2017-11-26 23:06:01 MANAGEMENT: CMD 'state'

2017-11-26 23:06:01 MANAGEMENT: CMD 'bytecount 1'

2017-11-26 23:06:01 MANAGEMENT: CMD 'hold release'

2017-11-26 23:06:01 MANAGEMENT: CMD 'username "Auth" "p6251787"'

2017-11-26 23:06:01 MANAGEMENT: CMD 'password [...]'

2017-11-26 23:06:01 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

2017-11-26 23:06:01 Socket Buffers: R=[196724->196724] S=[9216->9216]

2017-11-26 23:06:01 MANAGEMENT: >STATE:1511737561,RESOLVE,,,

2017-11-26 23:06:01 UDPv4 link local: [undef]

2017-11-26 23:06:01 UDPv4 link remote: [AF_INET]46.166.190.224:1194

2017-11-26 23:06:01 MANAGEMENT: >STATE:1511737561,WAIT,,,

2017-11-26 23:06:01 MANAGEMENT: >STATE:1511737561,AUTH,,,

2017-11-26 23:06:01 TLS: Initial packet from [AF_INET]46.166.190.224:1194, sid=2a8f0f68 1b0cf7cf

2017-11-26 23:06:01 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this

2017-11-26 23:06:01 CRL CHECK OK: C=US, ST=OH, L=Columbus, O=Private Internet Access, CN=Private Internet Access CA, emailAddress=sec...@privateinternetaccess.com

2017-11-26 23:06:01 VERIFY OK: depth=1, C=US, ST=OH, L=Columbus, O=Private Internet Access, CN=Private Internet Access CA, emailAddress=sec...@privateinternetaccess.com

2017-11-26 23:06:01 Validating certificate key usage

2017-11-26 23:06:01 ++ Certificate has key usage 00a0, expects 00a0

2017-11-26 23:06:01 VERIFY KU OK

2017-11-26 23:06:01 Validating certificate extended key usage

2017-11-26 23:06:01 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication

2017-11-26 23:06:01 VERIFY EKU OK

2017-11-26 23:06:01 CRL CHECK OK: C=US, ST=CA, L=LosAngeles, O=Private Internet Access, OU=Private Internet Access, CN=1dbc6626fcffb4bb9b92ba5dbef5bb29, name=1dbc6626fcffb4bb9b92ba5dbef5bb29

2017-11-26 23:06:01 VERIFY OK: depth=0, C=US, ST=CA, L=LosAngeles, O=Private Internet Access, OU=Private Internet Access, CN=1dbc6626fcffb4bb9b92ba5dbef5bb29, name=1dbc6626fcffb4bb9b92ba5dbef5bb29

2017-11-26 23:06:02 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key

2017-11-26 23:06:02 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).

2017-11-26 23:06:02 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication

2017-11-26 23:06:02 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key

2017-11-26 23:06:02 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).

2017-11-26 23:06:02 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication

2017-11-26 23:06:02 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA

2017-11-26 23:06:02 [1dbc6626fcffb4bb9b92ba5dbef5bb29] Peer Connection Initiated with [AF_INET]46.166.190.224:1194

2017-11-26 23:06:03 MANAGEMENT: >STATE:1511737563,GET_CONFIG,,,

2017-11-26 23:06:04 SENT CONTROL [1dbc6626fcffb4bb9b92ba5dbef5bb29]: 'PUSH_REQUEST' (status=1)

2017-11-26 23:06:04 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 209.222.18.222,dhcp-option DNS 209.222.18.218,ping 10,comp-lzo no,route 10.0.10.1,topology net30,ifconfig 10.0.10.6 10.0.10.5,auth-token qbtD9ShF81omTbTRJhBjCHv41wiyUsPrYSObv54o9Eg='

2017-11-26 23:06:04 OPTIONS IMPORT: timers and/or timeouts modified

2017-11-26 23:06:04 OPTIONS IMPORT: LZO parms modified

2017-11-26 23:06:04 OPTIONS IMPORT: --ifconfig/up options modified

2017-11-26 23:06:04 OPTIONS IMPORT: route options modified

2017-11-26 23:06:04 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified

2017-11-26 23:06:04 Opening utun (connect(AF_SYS_CONTROL)): Resource busy

2017-11-26 23:06:04 Opened utun device utun1

2017-11-26 23:06:04 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0

2017-11-26 23:06:04 MANAGEMENT: >STATE:1511737564,ASSIGN_IP,,10.0.10.6,

2017-11-26 23:06:04 /sbin/ifconfig utun1 delete

ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address

2017-11-26 23:06:04 NOTE: Tried to delete pre-existing tun/tap instance -- No Problem if failure

2017-11-26 23:06:04 /sbin/ifconfig utun1 10.0.10.6 10.0.10.5 mtu 1500 netmask 255.255.255.255 up

2017-11-26 23:06:04 /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw utun1 1500 1542 10.0.10.6 10.0.10.5 init

**********************************************

Start of output from client.up.tunnelblick.sh

Retrieved from OpenVPN: name server(s) [ 209.222.18.222 209.222.18.218 ], search domain(s) [ ] and SMB server(s) [ ] and using default domain name [ openvpn ]

WARNING: Ignoring ServerAddresses '209.222.18.222 209.222.18.218' because ServerAddresses was set manually and '-allowChangesToManuallySetNetworkSettings' was not specified

Saved the DNS and SMB configurations so they can be restored

Did not change DNS ServerAddresses setting of '208.67.222.222 208.67.220.220' (but re-set it)

Changed DNS SearchDomains setting from '' to 'openvpn'

Changed DNS DomainName setting from '' to 'openvpn'

Did not change SMB NetBIOSName setting of ''

Did not change SMB Workgroup setting of ''

Did not change SMB WINSAddresses setting of ''

DNS servers '208.67.222.222 208.67.220.220' were set manually

DNS servers '208.67.222.222 208.67.220.220' will be used for DNS queries when the VPN is active

The DNS servers include only free public DNS servers known to Tunnelblick.

Flushed the DNS cache via dscacheutil

/usr/sbin/discoveryutil not present. Not flushing the DNS cache via discoveryutil

Notified mDNSResponder that the DNS cache was flushed

Setting up to monitor system configuration with process-network-changes

End of output from client.up.tunnelblick.sh

**********************************************

2017-11-26 23:06:08 *Tunnelblick: No 'connected.sh' script to execute

2017-11-26 23:06:08 /sbin/route add -net 46.166.190.224 192.168.0.1 255.255.255.255

add net 46.166.190.224: gateway 192.168.0.1

2017-11-26 23:06:08 /sbin/route add -net 0.0.0.0 10.0.10.5 128.0.0.0

add net 0.0.0.0: gateway 10.0.10.5

2017-11-26 23:06:08 /sbin/route add -net 128.0.0.0 10.0.10.5 128.0.0.0

add net 128.0.0.0: gateway 10.0.10.5

2017-11-26 23:06:08 MANAGEMENT: >STATE:1511737568,ADD_ROUTES,,,

2017-11-26 23:06:08 /sbin/route add -net 10.0.10.1 10.0.10.5 255.255.255.255

add net 10.0.10.1: gateway 10.0.10.5

2017-11-26 23:06:08 Initialization Sequence Completed

2017-11-26 23:06:08 MANAGEMENT: >STATE:1511737568,CONNECTED,SUCCESS,10.0.10.6,46.166.190.224

2017-11-26 23:06:48 *Tunnelblick process-network-changes: A system configuration change was ignored

2017-11-26 23:06:53 *Tunnelblick: After 30.0 seconds, gave up trying to fetch IP address information using the ipInfo host's name after connecting.

2017-11-26 23:06:54 *Tunnelblick: fetched IP address information using the ipInfo host's IP address after connecting.

ether 66:3e:fe:62:78:b4

inet6 fe80::643e:feff:fe62:78b4%awdl0 prefixlen 64 scopeid 0x8

nd6 options=201<PERFORMNUD,DAD>

media: autoselect

status: active

bridge0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500

options=63<RXCSUM,TXCSUM,TSO4,TSO6>

ether 72:00:00:c1:19:10

Configuration:

id 0:0:0:0:0:0 priority 0 hellotime 0 fwddelay 0

maxage 0 holdcnt 0 proto stp maxaddr 100 timeout 1200

root id 0:0:0:0:0:0 priority 0 ifcost 0 port 0

ipfilter disabled flags 0x2

member: en1 flags=3<LEARNING,DISCOVER>

ifmaxaddr 0 port 5 priority 0 path cost 0

member: en2 flags=3<LEARNING,DISCOVER>

ifmaxaddr 0 port 6 priority 0 path cost 0

media: <unknown type>

status: inactive

utun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 2000

inet6 fe80::edd:79bb:ec2f:b935%utun0 prefixlen 64 scopeid 0xa

nd6 options=201<PERFORMNUD,DAD>

utun1: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1500

inet 10.0.10.6 --> 10.0.10.5 netmask 0xffffffff

================================================================================

Console Log:

2017-11-26 20:15:02 Tunnelblick[2888] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Netherlands' account = 'username'

2017-11-26 20:15:02 Tunnelblick[2888] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Netherlands' account = 'password'

2017-11-26 22:59:05 Tunnelblick[2888] applicationShouldTerminate: termination because of Quit; delayed until 'shutdownTunnelblick' finishes

2017-11-26 22:59:05 Tunnelblick[2888] Finished shutting down Tunnelblick; allowing termination

2017-11-26 22:59:18 Tunnelblick[3945] Tunnelblick: OS X 10.12.6; Tunnelblick 3.7.5beta02 (build 4930)

2017-11-26 22:59:18 Tunnelblick[3945] Warning: preferences contain unknown preference 'userAgreementVersionAgreedTo'

2017-11-26 22:59:19 Tunnelblick[3945] DB-IC: currentIPInfo(Name): Set timeout to 1.000000 and made request to https://tunnelblick.net/ipinfo

2017-11-26 22:59:20 Tunnelblick[3945] DB-IC: currentIPInfo(Name): IP address check: error was '(null)'; response was '<NSHTTPURLResponse: 0x60000002a780> { URL: https://tunnelblick.net/ipinfo } { status code: 200, headers {

"Cache-Control" = "max-age=60";

"Content-Length" = 34;

"Content-Type" = "text/plain; charset=UTF-8";

Date = "Sun, 26 Nov 2017 22:59:20 GMT";

Expires = "Sun, 26 Nov 2017 23:00:20 GMT";

Pragma = "no-cache";

Server = "cloudflare-nginx";

"Strict-Transport-Security" = "max-age=15552000; includeSubDomains; preload";

Vary = "User-Agent";

"cf-ray" = "3c4075211d3235fc-LHR";

"content-security-policy" = "default-src 'none'; style-src https://tunnelblick.net https://www.tunnelblick.net; img-src https://tunnelblick.net https://www.tunnelblick.net;";

"referrer-policy" = "no-referrer";

"x-content-type-options" = nosniff;

"x-frame-options" = DENY;

"x-xss-protection" = "1; mode=block";

} }'; data was <39342e31 37352e31 34332e31 392c3335 3633352c 3230352e 3233332e 37332e31 3136>

2017-11-26 22:59:20 Tunnelblick[3945] DB-IC: currentIPInfo(Name): IP address info was fetched in 672 milliseconds

2017-11-26 22:59:20 Tunnelblick[3945] DB-IC: currentIPInfo(Name): [94.175.143.19, 35635, 205.233.73.116]

2017-11-26 22:59:20 Tunnelblick[3945] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Netherlands' account = 'username'

2017-11-26 22:59:20 Tunnelblick[3945] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Netherlands' account = 'password'

2017-11-26 22:59:21 Tunnelblick[3945] Sparkle: ===== Tunnelblick =====

2017-11-26 22:59:21 Tunnelblick[3945] Sparkle: Verified appcast signature

2017-11-26 22:59:26 Tunnelblick[3945] DB-IC: checkIPAddressAfterConnectedThread: Delaying 10.000000 seconds before checking connection

2017-11-26 22:59:36 Tunnelblick[3945] DB-IC: currentIPInfo(Name): Set timeout to 1.000000 and made request to https://tunnelblick.net/ipinfo

2017-11-26 22:59:37 Tunnelblick[3945] DB-IC: currentIPInfo(Name): IP address check: error was 'Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={NSUnderlyingError=0x600000258b40 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "The request timed out." UserInfo={NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.}'; response was '(null)'; data was (null)

2017-11-26 22:59:38 Tunnelblick[3945] DB-IC: currentIPInfo(Name): Set timeout to 2.000000 and made request to https://tunnelblick.net/ipinfo

2017-11-26 22:59:40 Tunnelblick[3945] DB-IC: currentIPInfo(Name): IP address check: error was 'Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={NSUnderlyingError=0x60800024a770 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "The request timed out." UserInfo={NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.}'; response was '(null)'; data was (null)

2017-11-26 22:59:41 Tunnelblick[3945] DB-IC: currentIPInfo(Name): Set timeout to 4.000000 and made request to https://tunnelblick.net/ipinfo

2017-11-26 22:59:45 Tunnelblick[3945] DB-IC: currentIPInfo(Name): IP address check: error was 'Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={NSUnderlyingError=0x600000246180 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "The request timed out." UserInfo={NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.}'; response was '(null)'; data was (null)

2017-11-26 22:59:46 Tunnelblick[3945] DB-IC: currentIPInfo(Name): Set timeout to 8.000000 and made request to https://tunnelblick.net/ipinfo

2017-11-26 22:59:54 Tunnelblick[3945] DB-IC: currentIPInfo(Name): IP address check: error was 'Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={NSUnderlyingError=0x610000055120 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "The request timed out." UserInfo={NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.}'; response was '(null)'; data was (null)

2017-11-26 22:59:55 Tunnelblick[3945] DB-IC: currentIPInfo(Name): Set timeout to 16.000000 and made request to https://tunnelblick.net/ipinfo

2017-11-26 23:00:06 Tunnelblick[3945] DB-IC: currentIPInfo(Name): IP address check: error was '(null)'; response was '<NSHTTPURLResponse: 0x610000030980> { URL: https://tunnelblick.net/ipinfo } { status code: 200, headers {

"Cache-Control" = "max-age=60";

"Content-Length" = 34;

"Content-Type" = "text/plain; charset=UTF-8";

Date = "Sun, 26 Nov 2017 23:00:06 GMT";

Expires = "Sun, 26 Nov 2017 23:01:06 GMT";

Pragma = "no-cache";

Server = "cloudflare-nginx";

"Strict-Transport-Security" = "max-age=15552000; includeSubDomains; preload";

Vary = "User-Agent";

"cf-ray" = "3c4076406c30074f-AMS";

"content-security-policy" = "default-src 'none'; style-src https://tunnelblick.net https://www.tunnelblick.net; img-src https://tunnelblick.net https://www.tunnelblick.net;";

"referrer-policy" = "no-referrer";

"x-content-type-options" = nosniff;

"x-frame-options" = DENY;

"x-xss-protection" = "1; mode=block";

} }'; data was <3231322e 39322e31 31322e35 312c3135 3035312c 3230352e 3233332e 37332e31 3136>

2017-11-26 23:00:06 Tunnelblick[3945] DB-IC: currentIPInfo(Name): IP address info was fetched in 29759 milliseconds

2017-11-26 23:00:06 Tunnelblick[3945] DB-IC: currentIPInfo(Name): [212.92.112.51, 15051, 205.233.73.116]

2017-11-26 23:00:06 Tunnelblick[3945] DB-IC: checkIPAddressAfterConnectedThread: fetched IP address 212.92.112.51

2017-11-26 23:02:14 Tunnelblick[3945] DB-IC: currentIPInfo(Name): Set timeout to 1.000000 and made request to https://tunnelblick.net/ipinfo

2017-11-26 23:02:14 Tunnelblick[3945] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Netherlands' account = 'username'

2017-11-26 23:02:14 Tunnelblick[3945] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Netherlands' account = 'password'

2017-11-26 23:02:14 Tunnelblick[3945] DB-IC: currentIPInfo(Name): IP address check: error was '(null)'; response was '<NSHTTPURLResponse: 0x61000002e9e0> { URL: https://tunnelblick.net/ipinfo } { status code: 200, headers {

"Cache-Control" = "max-age=60";

"Content-Length" = 34;

"Content-Type" = "text/plain; charset=UTF-8";

Date = "Sun, 26 Nov 2017 23:02:14 GMT";

Expires = "Sun, 26 Nov 2017 23:03:14 GMT";

Pragma = "no-cache";

Server = "cloudflare-nginx";

"Strict-Transport-Security" = "max-age=15552000; includeSubDomains; preload";

Vary = "User-Agent";

"cf-ray" = "3c407963fa2334ca-LHR";

"content-security-policy" = "default-src 'none'; style-src https://tunnelblick.net https://www.tunnelblick.net; img-src https://tunnelblick.net https://www.tunnelblick.net;";

"referrer-policy" = "no-referrer";

"x-content-type-options" = nosniff;

"x-frame-options" = DENY;

"x-xss-protection" = "1; mode=block";

} }'; data was <39342e31 37352e31 34332e31 392c3239 3235392c 3230352e 3233332e 37332e31 3136>

2017-11-26 23:02:14 Tunnelblick[3945] DB-IC: currentIPInfo(Name): IP address info was fetched in 644 milliseconds

2017-11-26 23:02:14 Tunnelblick[3945] DB-IC: currentIPInfo(Name): [94.175.143.19, 29259, 205.233.73.116]

2017-11-26 23:02:21 Tunnelblick[3945] DB-IC: checkIPAddressAfterConnectedThread: Delaying 10.000000 seconds before checking connection

2017-11-26 23:02:31 Tunnelblick[3945] DB-IC: currentIPInfo(Name): Set timeout to 1.000000 and made request to https://tunnelblick.net/ipinfo

2017-11-26 23:02:32 Tunnelblick[3945] DB-IC: currentIPInfo(Name): IP address check: error was 'Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={NSUnderlyingError=0x61000005c230 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "The request timed out." UserInfo={NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.}'; response was '(null)'; data was (null)

2017-11-26 23:02:33 Tunnelblick[3945] DB-IC: currentIPInfo(Name): Set timeout to 2.000000 and made request to https://tunnelblick.net/ipinfo

2017-11-26 23:02:35 Tunnelblick[3945] DB-IC: currentIPInfo(Name): IP address check: error was 'Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={NSUnderlyingError=0x60800024a830 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "The request timed out." UserInfo={NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.}'; response was '(null)'; data was (null)

2017-11-26 23:02:36 Tunnelblick[3945] DB-IC: currentIPInfo(Name): Set timeout to 4.000000 and made request to https://tunnelblick.net/ipinfo

2017-11-26 23:02:40 Tunnelblick[3945] DB-IC: currentIPInfo(Name): IP address check: error was 'Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={NSUnderlyingError=0x60800024d200 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "The request timed out." UserInfo={NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.}'; response was '(null)'; data was (null)

2017-11-26 23:02:41 Tunnelblick[3945] DB-IC: currentIPInfo(Name): Set timeout to 8.000000 and made request to https://tunnelblick.net/ipinfo

2017-11-26 23:02:49 Tunnelblick[3945] DB-IC: currentIPInfo(Name): IP address check: error was 'Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={NSUnderlyingError=0x60800024a7d0 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "The request timed out." UserInfo={NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.}'; response was '(null)'; data was (null)

2017-11-26 23:02:50 Tunnelblick[3945] DB-IC: currentIPInfo(Name): Set timeout to 16.000000 and made request to https://tunnelblick.net/ipinfo

2017-11-26 23:03:02 Tunnelblick[3945] DB-IC: currentIPInfo(Name): IP address check: error was '(null)'; response was '<NSHTTPURLResponse: 0x61800002d440> { URL: https://tunnelblick.net/ipinfo } { status code: 200, headers {

"Cache-Control" = "max-age=60";

"Content-Length" = 35;

"Content-Type" = "text/plain; charset=UTF-8";

Date = "Sun, 26 Nov 2017 23:03:02 GMT";

Expires = "Sun, 26 Nov 2017 23:04:02 GMT";

Pragma = "no-cache";

Server = "cloudflare-nginx";

"Strict-Transport-Security" = "max-age=15552000; includeSubDomains; preload";

Vary = "User-Agent";

"cf-ray" = "3c407a8e8ff82b58-AMS";

"content-security-policy" = "default-src 'none'; style-src https://tunnelblick.net https://www.tunnelblick.net; img-src https://tunnelblick.net https://www.tunnelblick.net;";

"referrer-policy" = "no-referrer";

"x-content-type-options" = nosniff;

"x-frame-options" = DENY;

"x-xss-protection" = "1; mode=block";

} }'; data was <3231322e 39322e31 32302e32 33382c31 31353133 2c323035 2e323333 2e37332e 313136>

2017-11-26 23:03:02 Tunnelblick[3945] DB-IC: currentIPInfo(Name): IP address info was fetched in 31358 milliseconds

2017-11-26 23:03:02 Tunnelblick[3945] DB-IC: currentIPInfo(Name): [212.92.120.238, 11513, 205.233.73.116]

2017-11-26 23:03:02 Tunnelblick[3945] DB-IC: checkIPAddressAfterConnectedThread: fetched IP address 212.92.120.238

2017-11-26 23:03:48 Tunnelblick[3945] applicationShouldTerminate: termination because of Quit; delayed until 'shutdownTunnelblick' finishes

2017-11-26 23:03:48 Tunnelblick[3945] Finished shutting down Tunnelblick; allowing termination

2017-11-26 23:03:50 Tunnelblick[4545] Tunnelblick: OS X 10.12.6; Tunnelblick 3.7.5beta02 (build 4930)

2017-11-26 23:03:51 Tunnelblick[4545] Warning: preferences contain unknown preference 'userAgreementVersionAgreedTo'

2017-11-26 23:03:51 Tunnelblick[4545] DB-IC: currentIPInfo(Name): Set timeout to 1.000000 and made request to https://tunnelblick.net/ipinfo

2017-11-26 23:03:52 Tunnelblick[4545] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Netherlands' account = 'username'

2017-11-26 23:03:52 Tunnelblick[4545] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Netherlands' account = 'password'

2017-11-26 23:03:52 Tunnelblick[4545] DB-IC: currentIPInfo(Name): IP address check: error was '(null)'; response was '<NSHTTPURLResponse: 0x608000224300> { URL: https://tunnelblick.net/ipinfo } { status code: 200, headers {

"Cache-Control" = "max-age=60";

"Content-Length" = 34;

"Content-Type" = "text/plain; charset=UTF-8";

Date = "Sun, 26 Nov 2017 23:03:52 GMT";

Expires = "Sun, 26 Nov 2017 23:04:52 GMT";

Pragma = "no-cache";

Server = "cloudflare-nginx";

"Strict-Transport-Security" = "max-age=15552000; includeSubDomains; preload";

Vary = "User-Agent";

"cf-ray" = "3c407bc5d8f634c4-LHR";

"content-security-policy" = "default-src 'none'; style-src https://tunnelblick.net https://www.tunnelblick.net; img-src https://tunnelblick.net https://www.tunnelblick.net;";

"referrer-policy" = "no-referrer";

"x-content-type-options" = nosniff;

"x-frame-options" = DENY;

"x-xss-protection" = "1; mode=block";

} }'; data was <39342e31 37352e31 34332e31 392c3132 3735312c 3230352e 3233332e 37332e31 3136>

2017-11-26 23:03:52 Tunnelblick[4545] DB-IC: currentIPInfo(Name): IP address info was fetched in 645 milliseconds

2017-11-26 23:03:52 Tunnelblick[4545] DB-IC: currentIPInfo(Name): [94.175.143.19, 12751, 205.233.73.116]

2017-11-26 23:03:52 Tunnelblick[4545] Sparkle: ===== Tunnelblick =====

2017-11-26 23:03:52 Tunnelblick[4545] Sparkle: Verified appcast signature

2017-11-26 23:03:58 Tunnelblick[4545] DB-IC: checkIPAddressAfterConnectedThread: Delaying 10.000000 seconds before checking connection

2017-11-26 23:04:08 Tunnelblick[4545] DB-IC: currentIPInfo(Name): Set timeout to 1.000000 and made request to https://tunnelblick.net/ipinfo

2017-11-26 23:04:09 Tunnelblick[4545] DB-IC: currentIPInfo(Name): IP address check: error was 'Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={NSUnderlyingError=0x600000249ab0 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "The request timed out." UserInfo={NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.}'; response was '(null)'; data was (null)

2017-11-26 23:04:10 Tunnelblick[4545] DB-IC: currentIPInfo(Name): Set timeout to 2.000000 and made request to https://tunnelblick.net/ipinfo

2017-11-26 23:04:12 Tunnelblick[4545] DB-IC: currentIPInfo(Name): IP address check: error was 'Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={NSUnderlyingError=0x610000259bf0 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "The request timed out." UserInfo={NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.}'; response was '(null)'; data was (null)

2017-11-26 23:04:13 Tunnelblick[4545] DB-IC: currentIPInfo(Name): Set timeout to 4.000000 and made request to https://tunnelblick.net/ipinfo

2017-11-26 23:04:17 Tunnelblick[4545] DB-IC: currentIPInfo(Name): IP address check: error was 'Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={NSUnderlyingError=0x610000259530 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "The request timed out." UserInfo={NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.}'; response was '(null)'; data was (null)

2017-11-26 23:04:18 Tunnelblick[4545] DB-IC: currentIPInfo(Name): Set timeout to 8.000000 and made request to https://tunnelblick.net/ipinfo

2017-11-26 23:04:26 Tunnelblick[4545] DB-IC: currentIPInfo(Name): IP address check: error was 'Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={NSUnderlyingError=0x60000024ab60 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "The request timed out." UserInfo={NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.}'; response was '(null)'; data was (null)

2017-11-26 23:04:27 Tunnelblick[4545] DB-IC: currentIPInfo(Name): Set timeout to 16.000000 and made request to https://tunnelblick.net/ipinfo

2017-11-26 23:04:41 Tunnelblick[4545] DB-IC: currentIPInfo(Name): IP address check: error was '(null)'; response was '<NSHTTPURLResponse: 0x60800003de80> { URL: https://tunnelblick.net/ipinfo } { status code: 200, headers {

"Cache-Control" = "max-age=60";

"Content-Length" = 35;

"Content-Type" = "text/plain; charset=UTF-8";

Date = "Sun, 26 Nov 2017 23:04:41 GMT";

Expires = "Sun, 26 Nov 2017 23:05:41 GMT";

Pragma = "no-cache";

Server = "cloudflare-nginx";

"Strict-Transport-Security" = "max-age=15552000; includeSubDomains; preload";

Vary = "User-Agent";

"cf-ray" = "3c407cf9ea7272d7-AMS";

"content-security-policy" = "default-src 'none'; style-src https://tunnelblick.net https://www.tunnelblick.net; img-src https://tunnelblick.net https://www.tunnelblick.net;";

"referrer-policy" = "no-referrer";

"x-content-type-options" = nosniff;

"x-frame-options" = DENY;

"x-xss-protection" = "1; mode=block";

} }'; data was <3231322e 39322e31 31342e31 38382c31 39393033 2c323035 2e323333 2e37332e 313136>

2017-11-26 23:04:41 Tunnelblick[4545] DB-IC: currentIPInfo(Name): IP address info was fetched in 33191 milliseconds

2017-11-26 23:04:41 Tunnelblick[4545] DB-IC: currentIPInfo(Name): [212.92.114.188, 19903, 205.233.73.116]

2017-11-26 23:04:41 Tunnelblick[4545] DB-IC: checkIPAddressAfterConnectedThread: fetched IP address 212.92.114.188

2017-11-26 23:05:05 Tunnelblick[4545] applicationShouldTerminate: termination because of restart; delayed until 'shutdownTunnelblick' finishes

2017-11-26 23:05:05 Tunnelblick[4545] Finished shutting down Tunnelblick; allowing termination

2017-11-26 23:05:55 Tunnelblick[450] Tunnelblick: OS X 10.12.6; Tunnelblick 3.7.5beta02 (build 4930)

2017-11-26 23:05:55 Tunnelblick[450] Warning: preferences contain unknown preference 'userAgreementVersionAgreedTo'

2017-11-26 23:06:00 Tunnelblick[450] DB-IC: currentIPInfo(Name): Set timeout to 1.000000 and made request to https://tunnelblick.net/ipinfo

2017-11-26 23:06:01 Tunnelblick[450] DB-IC: currentIPInfo(Name): IP address check: error was '(null)'; response was '<NSHTTPURLResponse: 0x61800002f000> { URL: https://tunnelblick.net/ipinfo } { status code: 200, headers {

"Cache-Control" = "max-age=60";

"Content-Length" = 34;

"Content-Type" = "text/plain; charset=UTF-8";

Date = "Sun, 26 Nov 2017 23:06:01 GMT";

Expires = "Sun, 26 Nov 2017 23:07:01 GMT";

Pragma = "no-cache";

Server = "cloudflare-nginx";

"Strict-Transport-Security" = "max-age=15552000; includeSubDomains; preload";

Vary = "User-Agent";

"cf-ray" = "3c407eeb79716b85-LHR";

"content-security-policy" = "default-src 'none'; style-src https://tunnelblick.net https://www.tunnelblick.net; img-src https://tunnelblick.net https://www.tunnelblick.net;";

"referrer-policy" = "no-referrer";

"x-content-type-options" = nosniff;

"x-frame-options" = DENY;

"x-xss-protection" = "1; mode=block";

} }'; data was <39342e31 37352e31 34332e31 392c3335 3231392c 3230352e 3233332e 37332e31 3136>

2017-11-26 23:06:01 Tunnelblick[450] DB-IC: currentIPInfo(Name): IP address info was fetched in 1151 milliseconds

2017-11-26 23:06:01 Tunnelblick[450] DB-IC: currentIPInfo(Name): [94.175.143.19, 35219, 205.233.73.116]

2017-11-26 23:06:01 Tunnelblick[450] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Netherlands' account = 'username'

2017-11-26 23:06:01 Tunnelblick[450] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Netherlands' account = 'password'

2017-11-26 23:06:02 Tunnelblick[450] Sparkle: ===== Tunnelblick =====

2017-11-26 23:06:02 Tunnelblick[450] Sparkle: Verified appcast signature

2017-11-26 23:06:08 Tunnelblick[450] DB-IC: checkIPAddressAfterConnectedThread: Delaying 10.000000 seconds before checking connection

2017-11-26 23:06:14 ksinstall[755] 2017-11-26 23:06:14.146 ksinstall[755/0xa6f4e1c0] [lvl=2] -[KeystoneInstallTool main] Google Software Update installer started.

2017-11-26 23:06:14 ksinstall[755] 2017-11-26 23:06:14.151 ksinstall[755/0xa6f4e1c0] [lvl=2] -[KeystoneInstallTool main] Google Software Update installer starting Installation.

2017-11-26 23:06:14 ksinstall[755] 2017-11-26 23:06:14.359 ksinstall[755/0xa6f4e1c0] [lvl=2] -[KeystoneInstallTool main] Google Software Update installer ran successfully.

2017-11-26 23:06:18 Tunnelblick[450] DB-IC: currentIPInfo(Name): Set timeout to 1.000000 and made request to https://tunnelblick.net/ipinfo

2017-11-26 23:06:19 Tunnelblick[450] DB-IC: currentIPInfo(Name): IP address check: error was 'Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={NSUnderlyingError=0x608000243a50 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "The request timed out." UserInfo={NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.}'; response was '(null)'; data was (null)

2017-11-26 23:06:20 Tunnelblick[450] DB-IC: currentIPInfo(Name): Set timeout to 2.000000 and made request to https://tunnelblick.net/ipinfo

2017-11-26 23:06:22 Tunnelblick[450] DB-IC: currentIPInfo(Name): IP address check: error was 'Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={NSUnderlyingError=0x610000246120 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "The request timed out." UserInfo={NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.}'; response was '(null)'; data was (null)

2017-11-26 23:06:23 Tunnelblick[450] DB-IC: currentIPInfo(Name): Set timeout to 4.000000 and made request to https://tunnelblick.net/ipinfo

2017-11-26 23:06:27 Tunnelblick[450] DB-IC: currentIPInfo(Name): IP address check: error was 'Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={NSUnderlyingError=0x6000002508f0 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "The request timed out." UserInfo={NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.}'; response was '(null)'; data was (null)

2017-11-26 23:06:28 Tunnelblick[450] DB-IC: currentIPInfo(Name): Set timeout to 8.000000 and made request to https://tunnelblick.net/ipinfo

2017-11-26 23:06:36 Tunnelblick[450] DB-IC: currentIPInfo(Name): IP address check: error was 'Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={NSUnderlyingError=0x60800024c6f0 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "The request timed out." UserInfo={NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.}'; response was '(null)'; data was (null)

2017-11-26 23:06:37 Tunnelblick[450] DB-IC: currentIPInfo(Name): Set timeout to 16.000000 and made request to https://tunnelblick.net/ipinfo

2017-11-26 23:06:53 Tunnelblick[450] DB-IC: currentIPInfo(Name): IP address check: error was 'Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={NSUnderlyingError=0x6180004420a0 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "The request timed out." UserInfo={NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.}'; response was '(null)'; data was (null)

2017-11-26 23:06:53 Tunnelblick[450] currentIPInfo(Name): IP address info could not be fetched within 35.1 seconds; the error was 'Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={NSUnderlyingError=0x6180004420a0 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "The request timed out." UserInfo={NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.}'; the response was '(null)'

2017-11-26 23:06:53 Tunnelblick[450] DB-IC: checkIPAddressAfterConnectedThread: Timeout getting IP address using the ipInfo host's name; retrying by IP address

2017-11-26 23:06:53 Tunnelblick[450] DB-IC: currentIPInfo(Address): Set timeout to 1.000000 and made request to http://205.233.73.116/ipinfo

2017-11-26 23:06:54 Tunnelblick[450] DB-IC: currentIPInfo(Address): IP address check: error was '(null)'; response was '<NSHTTPURLResponse: 0x61000002b380> { URL: http://205.233.73.116/ipinfo } { status code: 403, headers {

Connection = "Keep-Alive";

"Content-Length" = 215;

"Content-Security-Policy" = "default-src 'none'; style-src https://tunnelblick.net https://www.tunnelblick.net; img-src https://tunnelblick.net https://www.tunnelblick.net;";

"Content-Type" = "text/html; charset=iso-8859-1";

Date = "Sun, 26 Nov 2017 23:06:53 GMT";

"Keep-Alive" = "timeout=75, max=500";

"Referrer-Policy" = "no-referrer";

Server = Apache;

"X-Content-Type-Options" = nosniff;

"X-Frame-Options" = DENY;

"X-XSS-Protection" = "1; mode=block";

} }'; data was <3c21444f 43545950 45204854 4d4c2050 55424c49 4320222d 2f2f4945 54462f2f 44544420 48544d4c 20322e30 2f2f454e 223e0a3c 68746d6c 3e3c6865 61643e0a 3c746974 6c653e34 30332046 6f726269 6464656e 3c2f7469 746c653e 0a3c2f68 6561643e 3c626f64 793e0a3c 68313e46 6f726269 6464656e 3c2f6831 3e0a3c70 3e596f75 20646f6e 27742068 61766520 7065726d 69737369 6f6e2074 6f206163 63657373 202f6970 696e666f 0a6f6e20 74686973 20736572 7665722e 3c627220 2f3e0a3c 2f703e0a 3c2f626f 64793e3c 2f68746d 6c3e0a>

2017-11-26 23:06:54 Tunnelblick[450] DB-IC: currentIPInfo(Address): IP address info was fetched in 239 milliseconds

2017-11-26 23:06:54 Tunnelblick[450] DB-IC: checkIPAddressAfterConnectedThread: fetched IP address 0.0.0.0 using the ipInfo host's IP address

2017-11-26 23:07:10 Tunnelblick[450] BUG in libdispatch client: kevent[EVFILT_MACHPORT] monitored resource vanished before the source cancel handler was invoked

Tunnelblick developer

unread,

Nov 26, 2017, 9:47:09 PM11/26/17

to tunnelblick-discuss

Thanks. That clarifies things and rules out a lot of potential causes.

The log for the failure says that Tunnelblick tried to access https://tunnelblick.net/ipinfo several times but never received a response. The last try had a timeout of 16 seconds, meaning that macOS waited 16 seconds for a response and did not receive one. (Tunnelblick tries up to 5 times, with timeouts of 1, 2, 4, 8, and 16 seconds.)

The try before that (which succeeded) also had a lot of trouble, and retried several times. The last try was successful only on the fifth try. That response took 14 seconds -- if it had taken three seconds more it would have timed out and been a failure.

However, assuming a reasonable network connection, the response should arrive in under one second from North America or Europe. (It takes a bit more, but is typically under two seconds, anywhere else in the world.) So a 14 second response time is very odd.

It's hard to imagine this is anything other than a slowdown caused by the VPN server (i.e., Private Internet Access), particularly since this seems to be a very rare problem but that it affects you often.

I think you have two choices:

(A) You could, with reasonable confidence, just have Tunnelblick stop checking the IP address. The check is helpful for some kinds of problems after connecting to a VPN, but you don't seem to be having any, and it is helpful to make sure a VPN is set up properly to send all traffic through the VPN, and it appears that it is, so you don't really need the IP address checks.

(B) If you want to keep checking, there are two things I can suggest to stop this problem:

Have Tunnelblick wait a very long time after the VPN is established to try to check the IP address;
and/or
Have Tunnelblick try more than five times, with even larger timeouts.

You could try them one at a time, or both at once. I'm pretty sure the second one will fix it, but the first one might and could end up with a faster response.

You can do #1 by increasing the wait time to, say, 30 seconds, with

defaults write net.tunnelblick.tunnelblick delayBeforeIPAddressCheckAfterConnection -float 30.0

You can do #2 by increasing the overall timeout to, say, 128 seconds (which would try with timeouts of 1, 2, 4, 8.16, 32, and 64 seconds), with

defaults write net.tunnelblick.tunnelblick timeoutForIPAddressCheckAfterConnection -float 128.0

And don't forget to stop the extra logging with this:

defaults delete net.tunnelblick.tunnelblick DB-IC

I'd appreciate feedback as to what worked or didn't work, if you try #1 and/or #2.

Good luck!

MattC

unread,

Nov 27, 2017, 4:50:11 PM11/27/17

to tunnelblick-discuss

I tried #2, and still got the error a few times.

Seems like there is a very strange problem is something should only take 1-2 seconds now still fails after 128....

Any other thoughts?

Tunnelblick developer

unread,

Nov 28, 2017, 7:41:54 AM11/28/17

to tunnelblick-discuss

You could:

Tell Tunnelblick that it can modify your manually-set DNS servers. You can do that in the "Allow changes to manually-set network settings" checkbox on the "Advanced" settings page. (Remember to select the configuration(s) that you want to change before putting a check in the checkbox.) That will let the the DNS servers that PIA specifies be used.
Try using a different DNS server (e.g., Google Public DNS at 8.8.8.8 and 8.8.4.4). (By setting it manually in System Preferences : Network, as you did to set up to use the OpenDSN DNS server at 208.67.222.222 and 208.67.220.220.)
Try the other VPN servers that PIA provides to see if the problem affects all of them. You might start by trying servers close to you (geographically) and servers on the USA East Coast (New York, Washington, etc.) which are near the tunnelblick.net server.
Try a different VPN service provider (see Getting VPN Service).

MattC

unread,

Dec 5, 2017, 7:00:03 AM12/5/17

to tunnelblick-discuss

I realised that I have not been seeing the error for a few days - I will continue to monitor the situation and report back if/when the error returns.

Reply all

Reply to author

Forward

0 new messages